Job Description
● Monitor and analyze logs and events daily, to determine whether any events could constitute a genuine security incident.
● Perform security monitoring, reviewing, investigating, and reporting the events generated by the SIEM.
● Document SOC output (pentest reports, vulnerability assessment reports, and incident response reports).
● Sensor health monitoring and SIEM service infrastructure.
● Analyze security logs, trace attacks, and report threats.
● Threat hunting and incident handling.